altimate-receipts 0.18.0 → 0.18.1

package/dist/{chunk-DNKSESAA.js → chunk-3R25IDH5.js}

@@ -15,17 +15,17 @@ import {
   redactReceipt,
   renderLedger,
   windowedEffort
-} from "./chunk-FPDXOAYN.js";
+} from "./chunk-JWDZLJDG.js";
 import {
   FIX_FOR,
   categorize
-} from "./chunk-YO6MVZTD.js";
+} from "./chunk-VKT2ZUCT.js";
 import {
   destructiveOutsideRepo,
   findingSurface,
   privileged,
   regenerableBuildArtifact
-} from "./chunk-IDAIDLZT.js";
+} from "./chunk-LYLHXQAU.js";
 
 // src/receipt/canonical.ts
 function canonicalize(value) {
@@ -996,4 +996,4 @@ export {
   rederiveFromTranscript,
   compareToTranscript
 };
-//# sourceMappingURL=chunk-DNKSESAA.js.map
+//# sourceMappingURL=chunk-3R25IDH5.js.map

package/dist/{chunk-FPDXOAYN.js → chunk-JWDZLJDG.js}

@@ -3,7 +3,7 @@ import {
   destructiveOutsideRepo,
   regenerableBuildArtifact,
   regenerableReceiptRm
-} from "./chunk-IDAIDLZT.js";
+} from "./chunk-LYLHXQAU.js";
 
 // src/findings/gitParse.ts
 var WRAPPER = /* @__PURE__ */ new Set(["sudo", "env", "nohup", "command", "stdbuf", "time", "timeout", "xargs"]);
@@ -2814,6 +2814,48 @@ function deriveMcpFindings(sum) {
     }
   ];
 }
+var MCP_CONFIG_FILE = /(?:^|\/)\.mcp\.json$|(?:^|\/)\.(?:cursor|vscode)\/mcp\.json$|(?:^|\/)claude_desktop_config\.json$|(?:^|\/)mcp\.json$/i;
+var SERVER_ENDPOINT = /"(?:command|url)"\s*:\s*"((?:[^"\\]|\\.)*)"/g;
+var endpointValues = (text) => {
+  const out = [];
+  for (const m of text.matchAll(SERVER_ENDPOINT)) {
+    out.push(m[1]);
+  }
+  return out;
+};
+function deriveMcpConfigFindings(sum) {
+  for (const s of sum.spans) {
+    if (s.kind !== "tool" || typeof s.name !== "string" || !isEditTool(s.name)) {
+      continue;
+    }
+    const fp = filePathOf(s.input);
+    if (!fp || !MCP_CONFIG_FILE.test(fp)) {
+      continue;
+    }
+    const { oldStr, newStr } = editBody(s.input);
+    const before = new Set(endpointValues(oldStr));
+    const added = endpointValues(newStr).filter((v) => !before.has(v));
+    if (added.length === 0) {
+      continue;
+    }
+    const base6 = fp.split("/").pop() ?? fp;
+    return [
+      {
+        id: `mcp-config-change-${s.spanId}`,
+        severity: "high",
+        title: `Added or repointed an MCP server in ${base6}`,
+        detail: `An edit to \`${base6}\` introduced or changed an MCP server endpoint (\`${added[0]}\`) \u2014 it grants the agent (and future agents on this branch) a new external tool surface with whatever credentials that server holds, which the source diff doesn't otherwise show. Review the new server's source and scopes before merging.`,
+        impactLabel: "MCP authority change",
+        confidence: 0.85,
+        score: 100 * 0.85,
+        evidenceSpanId: s.spanId,
+        filePath: fp,
+        guardrailRule: "Adding or repointing an MCP server expands the agent's authority \u2014 review the server's source and scopes as part of the change."
+      }
+    ];
+  }
+  return [];
+}
 
 // src/findings/persistenceFindings.ts
 var AUTORUN_PATH = /(?:^|\/)\.(?:bashrc|zshrc|bash_profile|zprofile|profile|bash_login|zshenv)$|(?:^|\/)\.config\/fish\/config\.fish$|^\/etc\/profile(?:\.d\/.+)?$|(?:^|\/)Library\/LaunchAgents\/[^/]+|^\/Library\/Launch(?:Daemons|Agents)\/[^/]+|^\/etc\/systemd\/system\/[^/]+|(?:^|\/)\.config\/systemd\/user\/[^/]+|^\/etc\/cron[^/]*|^\/var\/spool\/cron\//i;
@@ -3093,6 +3135,8 @@ var DETECTORS = [
   { name: "sensitive-access", fn: (s) => deriveSensitiveAccess(s) },
   // MCP external side-effects (M105): mutating MCP tool calls the diff can't show
   { name: "mcp", fn: (s) => deriveMcpFindings(s) },
+  // MCP config change (M113): a new/repointed MCP server in a config edit — authority expansion
+  { name: "mcp-config", fn: (s) => deriveMcpConfigFindings(s) },
   // command-pattern security (M106/108/109/110/111/112): metadata egress, untrusted dep source,
   // TLS-disable, setuid, obfuscated exec, masked verification failure
   { name: "command-security", fn: (s) => deriveCommandSecurityFindings(s) },
@@ -5675,4 +5719,4 @@ export {
   redact,
   redactReceipt
 };
-//# sourceMappingURL=chunk-FPDXOAYN.js.map
+//# sourceMappingURL=chunk-JWDZLJDG.js.map